Install
$ agentstack add skill-aldianriski-lean-flow-prototype ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
prototype
A prototype is throwaway code that answers a question. The question decides the shape. It slots into the design stage — when /orchestrator's Grill can't resolve a design on paper, prototype to feel the answer, then feed it into the plan.
Pick a branch
Identify the question — from the prompt, the surrounding code, or by asking:
- "Does this logic / state model / API feel right?" → terminal logic prototype. A tiny interactive TUI that drives a state machine by hand through cases that are hard to reason about on paper. Full process →
${CLAUDE_SKILL_DIR}/references/logic.md. - "What should this look like?" → web UI prototype (web projects only). Several radically different UI variations on one route, switchable from a floating bar. Full process →
${CLAUDE_SKILL_DIR}/references/ui.md.
Wrong branch = wasted prototype. If genuinely ambiguous and the user is unreachable, match the surrounding code (backend module → logic; page/component → UI) and state the assumption at the top.
Rules (both branches)
- Throwaway from day one, clearly marked. Locate it next to where it'll be used so context is obvious; name it so a casual reader sees it's a prototype, not production.
- One command to run — via the project's existing task runner. No path to remember.
- No persistence by default — state lives in memory. Persistence is the thing being checked, not depended on. If the question is about the DB, use a scratch store named
PROTOTYPE — wipe me. - Skip the polish — no tests, no error handling beyond runnable, no abstractions, no "what if we need X later". One question.
- Surface the state — after every action (logic) or variant switch (UI), render the full relevant state so the user sees what changed.
- Delete or absorb when done — never leave it rotting in the repo.
State the question first
Before any code, write the question + the model you're prototyping (one paragraph, at the top of the prototype or its NOTES.md). A prototype that answers the wrong question is pure waste — make it explicit so it's checkable later, including AFK.
Capture the answer (the only thing worth keeping)
When it's answered its question, record the answer + the question somewhere durable, then delete or absorb the prototype:
- A genuine design decision → an ADR (hard-to-reverse + surprising + a real trade-off).
- A decision-rich snippet (state machine, schema, type shape) → feed it into
/task-decomposer's PRD (its Implementation Decisions already cite "a prototype produced a snippet"). - Otherwise → a
NOTES.mdnext to the prototype with the verdict, filled before deletion.
Red flags
❌ A prototype with tests — it's no longer a prototype; that's /tdd. ❌ Wiring to the real database / real mutations — use an in-memory or stub store. ❌ Generalising — "support X later" defeats the point; answer one question. ❌ Shipping the shell to production — the TUI shell / variant switcher is hand-driven scaffolding; only the validated logic (or winning variant, rewritten) folds in. ❌ Leaving it in the repo unanswered — capture the verdict, then delete or absorb.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: aldianriski
- Source: aldianriski/lean-flow
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.